mirror of
https://github.com/CJackHwang/ds2api.git
synced 2026-05-11 19:57:41 +08:00
48 lines
1.3 KiB
Go
48 lines
1.3 KiB
Go
package server
|
|
|
|
import (
|
|
"bytes"
|
|
"log"
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"strings"
|
|
"testing"
|
|
"time"
|
|
|
|
"github.com/go-chi/chi/v5/middleware"
|
|
)
|
|
|
|
func TestFilteredLogFormatterRedactsSensitiveQueryParams(t *testing.T) {
|
|
var buf bytes.Buffer
|
|
formatter := &filteredLogFormatter{
|
|
base: &middleware.DefaultLogFormatter{
|
|
Logger: log.New(&buf, "", 0),
|
|
NoColor: true,
|
|
},
|
|
}
|
|
req := httptest.NewRequest(
|
|
http.MethodPost,
|
|
"/v1beta/models/gemini-2.5-pro:generateContent?key=caller-secret&api_key=second-secret&alt=sse",
|
|
nil,
|
|
)
|
|
|
|
entry := formatter.NewLogEntry(req)
|
|
entry.Write(http.StatusOK, 0, http.Header{}, time.Millisecond, nil)
|
|
|
|
got := buf.String()
|
|
for _, secret := range []string{"caller-secret", "second-secret"} {
|
|
if strings.Contains(got, secret) {
|
|
t.Fatalf("log line contains sensitive query value %q: %s", secret, got)
|
|
}
|
|
}
|
|
if !strings.Contains(got, "key=REDACTED") || !strings.Contains(got, "api_key=REDACTED") {
|
|
t.Fatalf("log line did not include redacted sensitive params: %s", got)
|
|
}
|
|
if !strings.Contains(got, "alt=sse") {
|
|
t.Fatalf("log line did not preserve non-sensitive query param: %s", got)
|
|
}
|
|
if req.URL.RawQuery != "key=caller-secret&api_key=second-secret&alt=sse" {
|
|
t.Fatalf("request was mutated, RawQuery = %q", req.URL.RawQuery)
|
|
}
|
|
}
|